iptables모듈이 올라오지 않습니다.
글쓴이: 웃는 남자 / 작성시간: 화, 2003/08/19 - 4:18오전
2.4.21 커널을 재컴파일하면서 커널옵션을 이것저것 수정했는데
무식한 -_-; 제가 뭘 잘못건드렸는지 모듈이 올라오지가 않네요.
함 봐주옵소서 (--)(__)
[root@lumi linux]# iptables -L
/lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_unregister_sockopt
/lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o: unresolved symbol nf_register_sockopt
/lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o: insmod /lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o failed
/lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o: insmod ip_tables failed
iptables v1.2.6a: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
컴파일한 후에 모듈의존성검사를 해보면
[root@lumi linux]# depmod -a
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/ipip.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/arp_tables.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/arptable_filter.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_conntrack.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/ip_tables.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/iptable_filter.o
depmod: *** Unresolved symbols in /lib/modules/2.4.21/kernel/net/ipv4/netfilter/iptable_mangle.o
에러출력내용입니당.
커널옵션설정이 잘못된 것 같은데 함 봐주세요.
--------------------------------------------------------------
Networking options --->
<*> Packet socket
[ ] Packet socket: mmapped IO
< > Netlink device emulation
[*] Network packet filtering (replaces ipchains)
[*] Network packet filtering debugging
[ ] Socket Filtering
<*> Unix domain sockets
[*] TCP/IP networking
[*] IP: multicasting
[ ] IP: advanced router
[ ] IP: kernel level autoconfiguration
<M> IP: tunneling
< > IP: GRE tunnels over IP
[ ] IP: multicast routing
[ ] IP: ARP daemon support (EXPERIMENTAL)
[*] IP: TCP Explicit Congestion Notification support
[ ] IP: TCP syncookie support (disabled per default)
IP: Netfilter Configuration --->
< > The IPv6 protocol (EXPERIMENTAL)
< > Kernel httpd acceleration (EXPERIMENTAL)
[ ] Asynchronous Transfer Mode (ATM) (EXPERIMENTAL)
< > 802.1Q VLAN Support
---
< > The IPX protocol
< > Appletalk protocol support
Appletalk devices --->
< > DECnet Support
< > 802.1d Ethernet Bridging
< > CCITT X.25 Packet Layer (EXPERIMENTAL)
< > LAPB Data Link Driver (EXPERIMENTAL)
[ ] 802.2 LLC (EXPERIMENTAL)
[ ] Frame Diverter (EXPERIMENTAL)
< > Acorn Econet/AUN protocols (EXPERIMENTAL)
< > WAN router
[ ] Fast switching (read help!)
[ ] Forwarding between high speed interfaces
QoS and/or fair queueing --->
Network testing --->
---------------------------------------------------------------
IP: Netfilter Configuration --->
<M> Connection tracking (required for masq/NAT)
< > FTP protocol support
< > Amanda protocol support
< > TFTP protocol support
< > IRC protocol support
< > Userspace queueing via NETLINK (EXPERIMENTAL)
<M> IP tables support (required for filtering/masq/NAT)
<M> limit match support
<M> MAC address match support
<M> Packet type match support
<M> netfilter MARK match support
<M> Multiple port match support
<M> TOS match support
<M> ECN match support
<M> DSCP match support
<M> AH/ESP match support
<M> LENGTH match support
<M> TTL match support
<M> tcpmss match support
< > Helper match support
< > Connection state match support
< > Connection tracking match support
< > Unclean match support (EXPERIMENTAL)
< > Owner match support (EXPERIMENTAL)
<M> Packet filtering
< > REJECT target support
< > MIRROR target support (EXPERIMENTAL)
< > Full NAT
<M> Packet mangling
< > TOS target support
< > ECN target support
< > DSCP target support
< > MARK target support
<M> LOG target support
<M> ULOG target support
<M> TCPMSS target support
<M> ARP tables support
<M> ARP packet filtering
< > ipchains (2.2-style) support
< > ipfwadm (2.0-style) support
------------------------------------------------------------------------- 이상이 제 커널 옵션 설정입니다.
무얼 수정해야 될 지 알려주시면 감사드리겠습니다.
Forums:
Unresolved Symbols는..
iptables 커널 옵션에는 별 문제가 없어보입니다.
커널 컴파일 하실때 순서를 차례로 다 밟으셨는지 모르겠습니다.
Unresolved Symbol 문제는 설정 등등 커널소스를 모두 초기화 해주시고 새로 세팅해서 재컴파일 하면 대부분이 해결됩니다.
modutils 패키지가 없는 경우는 거의 없으니깐요.
커널 컴파일 문서를 확인하시고 컴파일 절차를 한번 확인해보시는것도 좋을 것 같습니다.
여담으로..
..일반적인 사용에서, 디버깅은 별 필요가 없다고 생각됩니다.
방화벽을 구축하신다면 많이 쓰는 REJECT 를 많이 사용합니다. 그러니..
..에서 REJECT target support를 켜두시는것이 좋겠죠.
혹시 ipchain 을 사용하고 계신 것아 아닐까요? ipchain과 i
혹시 ipchain 을 사용하고 계신 것아 아닐까요? ipchain과 iptables는 동시에 모듈이 올라가지 않는 ㄱ것으로 알고 있습니다.
---- m( @.@)m -----------
댓글 달기